Your IT guy is right, salary PDFs flying around unprotected is asking for trouble. When I needed the same thing, I found a free online PDF converter called Convert2PDF that has a Protect PDF with a Password tool. You set a password and can block editing, copying or printing. It runs in the browser and the file isn’t uploaded to their servers, which is the part that convinced our security guy. No installation, so no approval process either. One practical tip from experience: never send the password in the same email as the file, use a text message or a phone call. Otherwise the protection is pretty much pointless. Do your department heads open these files on phones too?